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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Listing of Claims: 

1.-95. (Cancelled) 

96, (Currently Amended) A method for anonymously indexing an electronic record system, the 
method comprising: 

storing an asymmetric cryptographic private key within, and under the control of a 
portable storage device [[of]] associated with a registered use r, the private key operating within a 
public kev infrastructure : 

storing creating an anonymous public key certificat e and storing it within the public kev 
infrastructure , the anonymous public key certificate being associated with an asymmetric 
cryptographic public key matching the asymmetric cryptographic private key , wherein the 
anonymous public key certificate contains an electronic record pointer, the electronic record 
pointer being associated with each item of personal information of the registered user held in the 
elecfronic record system : 

providing the portable storage device with information for associating the registered user 
with the portable storage device; and 

indexing, within the electronic record system, the personal information of the registered 
user, wherein association of the personal information with the registered user is anonymously 
verifiable by the electronic record system when presented with and using « se-ej^the anonymous 
public key certificat e and the elecfronic record pointer, to affect anonymous indexing of the 
personal information within the elecfronic record system . 

97. (Previously Presented) The method of claim 96 wherein the information for associating the 
registered user with the portable storage device is at least one of: 
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human readable information; and 
machine readable information. 

98. (Previously Presented) The method of claim 96 wherein the portable storage device is at least 
one of: a smartcard and an electronic passport. 

99. -100. (Cancelled) 

101. (Currently Amended) The method according to claim [[99]] 96 wherein digital signature 
codes verifiable by using the anonymous public key certificate are created for pivm -nev/ data 
items within -written into t he electronic record system^ in order to explicitly link each digitally 
signed data item to mi -the electronic record pointer associat e d with th e digital signatur e 

eede scontained within the anonymous public key certificate, and wherein each digital signature 
code is interpreted as explicitly recording the consent of the registered person associated with the 
record pointer to the creation of each respective digitally signed data item . 

102. (Previously Presented) The method according to claim 96 wherein digital signature codes 
are created for given data items in the electronic record system using the asymmetric 

cryptographic private key, where each digital signature code is interpreted as explicitly recording 
the consent of the registered person to the creation of each respective digitally signed data item. 

103. (Currently Amended) An anonymously indexed electronic record system comprising: 

an electronic storage for indexing personal information of a registered user: and 
a portable storage device for a registered user, an asymmetric cryptographic private key 
being within and under the control of the portable storage device, the portable storage device 
being provided with information for associating the registered user with the portable storage 
device; and the portable storage device storing a stored ^i_anonymous public key certificate 
associated with an asymmetric cryptographic public key matching the asymmetric cryptographic 
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private ke y, the anonymous public key certificate containing an electronic record pointer, the 

electronic record pointer being associated with each item of personal information of the 

registered user held in the electronic record system ; oad 

an e l e ctronic storag e ind e xing p e rsonal information of th e register e d user, 

wh e r e by w herein association of the personal information with the registered user is 

anonymously verifiable by use of the anonymous public key certificat e and the electronic record 

pointer to effect anonymous indexing of the electronic record system . 

104. (Previously Presented) The system of claim 103 wherein the information for associating the 
registered user with the portable storage device is at least one of: 

human readable information; and 
machine readable information. 

105. (Previously Presented) The system of claim 103 wherein the portable storage device is at 
least one of: a smartcard and an electronic passport. 

106. (Cancelled) 

107. (Currently Amended) The system of claim [[106]] 103 wherein digital signature codes 
verifiable by using the anonymous public key certificate are created for jgjyen -new data items 
wtthift -written into the electronic record system^ in order to explicitly link each digitally signed 
data item to the valu e of an electronic record pointe r associated with th e digital signatur e cod e s 
contained within the anonymous public key certificate, and wherein each digital signature code is 
interpreted as explicitly recording the consent of the registered person associated with the record 
pointer to the creation of each respective digitally signed data item . 

108. (Previously Presented) The system of claim 103 wherein digital signature codes are created 
for given data items in the electronic record system using an asymmetric cryptographic private 
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key issued to the registered person, where each digital signature code is interpreted as explicitly 
recording the consent of the registered person to the creation of each respective digitally signed 
data item. 

109. (Previously presented) The system of claim 103 wherein the anonymous public key 
certificate contains a personal data component. 

110. (Previously presented) The system of claim 109 wherein the personal data component 
comprises biometric data of the registered user. 

111. (Cancelled) 

112. (Previously presented) The system of claim 103, wherein an access code is stored in the 
portable storage device allowing access to the asymmetric cryptographic private key. 

113. (Previously presented) The system of claim 103, wherein the asymmetric cryptographic 
private key can be copied with the registered user's authorization into the possession of an 
authorized user. 

1 14. (Previously presented) The system of claim 113 wherein the authorized user is a health care 
professional authorized by the registered user to enter an update to the registered user's indexed 
personal information. 

115. (Previously presented) A portable storage device for a registered user of an anonymously 
indexed electronic record system, the portable storage device being provided with information 

for associating the registered user with the portable storage device, wherein an asymmetric 
cryptographic private key is under the control of the portable storage device, wherein an 
anonymous public key certificate is associated with an asymmetric cryptographic public key 
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matching the asymmetric cryptographic private key, and wherein association of anonymously 
indexed personal information with the user is anonymously verifiable by use of the anonymous 
public key certificate. 

1 1 6. (New) The method according to claim 96 wherein the anonymous public key certificate 
held in the personal storage device further comprises data items setting out demographic 
information of the user. 

117. (New) The method according to claim 96 wherein the electronic record system is 
configured for identifiable indexing when a secret pass-phrase of the personal storage device has 
been entered, and for anonymous indexing when the electronic record pointer is provided 
without entry of the secret pass-phrase. 



-6- 



